Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency happy-dom to v15 [security] #3811

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 6, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
happy-dom ^14.12.3 -> ^15.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-51757

Impact

Consumers of the NPM package happy-dom

Patches

The security vulnerability has been patched in v15.10.2

Workarounds

No easy workarounds to my knowledge

References

#​1585


Release Notes

capricorn86/happy-dom (happy-dom)

v15.10.2

Compare Source

v15.10.1

Compare Source

v15.10.0

Compare Source

v15.9.0

Compare Source

v15.8.5

Compare Source

v15.8.4

Compare Source

v15.8.3

Compare Source

v15.8.2

Compare Source

v15.8.1

Compare Source

v15.8.0

Compare Source

v15.7.4

Compare Source

👷‍♂️ Patch fixes
  • Fixes incorrect handling of non-node items inserted using replaceWith(), before() and after() - By @​BenjaminAster in task #​1533

v15.7.3

Compare Source

👷‍♂️ Patch fixes
  • Fixes bug that occurs when checking if a symbol property exists on HTMLSelectElement - By @​Cherry in task #​1526

v15.7.2

Compare Source

👷‍♂️ Patch fixes
  • Fixes problem where it is not possible to observe again after disconnecting in MutationObserver - By @​capricorn86 in task #​1524

v15.7.1

Compare Source

👷‍♂️ Patch fixes
  • Fixes selector validation and converts selectors to string (e.g. querySelector(['.class'])) - By @​capricorn86 in task #​1507

v15.7.0

Compare Source

v15.6.1

Compare Source

v15.6.0

Compare Source

v15.5.0

Compare Source

v15.4.3

Compare Source

👷‍♂️ Patch fixes
  • Adds support for supporting new lines and tabs as white-space character in CSS selectors - By @​syi0808 in task #​1414

v15.4.2

Compare Source

👷‍♂️ Patch fixes

v15.4.1

Compare Source

👷‍♂️ Patch fixes
  • Throw error in FormData.append() when value parameter type is incorrect - By @​btea in task #​1484

v15.4.0

Compare Source

v15.3.2

Compare Source

👷‍♂️ Patch fixes
  • Fixes the HTMLInputElement.indeterminate, so that it behaves correctly - By @​malko in task #​1439

v15.3.1

Compare Source

v15.3.0

Compare Source

v15.2.0

Compare Source

🎨 Features

v15.1.0

Compare Source

🎨 Features
  • Refactor internal logic related to injecting the Window context for classes that can be constructed using the "new" operator - By @​capricorn86 in task #​1332
  • Improves the way classes can access the Browser context internally - By @​capricorn86 in task #​1332
  • Refactor of the logic for EventTarget.dispatchEvent() to better handle the event phases "none", "capture", "atTarget" and "bubbling" - By @​capricorn86 in task #​1332
  • Adds support for HTMLInputElement.popoverTargetElement, HTMLInputElement.popoverTargetAction, HTMLButtonElement.popoverTargetElement and HTMLButtonElement.popoverTargetAction - By @​capricorn86 in task #​1332
  • Adds support for HTMLElement.popover - By @​capricorn86 in task #​1332
  • Adds support for PerformanceObserver, PerformanceEntry and PerformanceObserverEntryList - By @​capricorn86 in task #​1332
👷‍♂️ Patch fixes
  • Makes it possible for a polyfill to replace NodeList[Symbol.iterator]() with Array.prototype.values() - By @​capricorn86 in task #​1332
  • Adds logic for canceling any request to start new async tasks while the Window is closing (e.g. using setTimeout() or fetch()) - By @​capricorn86 in task #​1332
  • Fixes issues with errors exiting the browser when using the setting "errorCapture" set to "processLevel" - By @​capricorn86 in task #​1332
    • Refactor internal logic, so that thrown errors are instances of unique error classes assigned to the Window, which makes it possible for BrowserExceptionObserver to know which Window the error originated from
  • Changes Event.composedPath() to not return the Window object if the event type is "load", which is the same behaviour as the browser - By @​capricorn86 in task #​1332
    • This means that "load" events will not bubble up to the Window object

v15.0.0

Compare Source

💣 Breaking Changes
  • Drops offical support for Node.js 16.x and 17.x - By @​capricorn86 in task #​1332
  • A lot of internal logic has been refactored, so if you rely on internal APIs, this release may break your code - By @​capricorn86 in task #​1332
🎨 Features
  • Adds support for HTMLAreaElement, HTMLBodyElement, HTMLQuoteElement, HTMLBRElement, HTMLTableCaptionElement, HTMLTableColElement, HTMLTableColElement, HTMLDataElement, HTMLDataListElement, HTMLModElement, HTMLDetailsElement, HTMLDivElement, HTMLDListElement, HTMLEmbedElement, HTMLFieldSetElement, HTMLHeadingElement, HTMLHeadElement, HTMLHRElement, HTMLHtmlElement, HTMLModElement, HTMLLegendElement, HTMLLIElement, HTMLMapElement, HTMLMenuElement, HTMLMeterElement, HTMLObjectElement, HTMLOListElement, HTMLOutputElement, HTMLParagraphElement, HTMLParamElement, HTMLPictureElement, HTMLPreElement, HTMLProgressElement, HTMLQuoteElement, HTMLSourceElement, HTMLSpanElement, HTMLTableElement, HTMLTableSectionElement, HTMLTableSectionElement, HTMLTitleElement, HTMLTableRowElement, HTMLTrackElement, HTMLUListElement - By @​capricorn86 in task #​1332
  • Adds basic support for HTMLCanvasElement - By @​capricorn86 in task #​1332
  • Adds support for History API - By @​capricorn86 in task #​1332
  • Adds cache to CSSStyleDeclaration, querySelector(), querySelectorAll(), getElementById(), getElementsByClassName(), getElementsByTagName(), getElementsByTagNameNS(), getElementsByClassName() - By @​capricorn86 in task #​1332
  • Uses proxy for NodeList, HTMLCollection, DOMTokenList, TextTrackList, HTMLFormElement, HTMLSelectElement
  • Makes HTMLCollection objects returned by getElementsByClassName(), getElementsByTagName(), getElementsByTagNameNS() and getElementsByClassName() live - By @​capricorn86 in task #​1332
  • Improves support for HTMLMediaElement - By @​capricorn86 in task #​1332
    • It now supports all methods and properties of the HTMLMediaElement interface
  • Adds support for MediaStream, MediaStreamTrack, RemotePlayback, TextTrack, TextTrackCue, TextTrackCueList, TextTrackList, VTTCue, VTTRegion, CanvasCaptureMediaStream, ImageBitmap, OffscreenCanvas - By @​capricorn86 in task #​1332
  • Adds basic support for IntersectionObserver - By @​capricorn86 in task #​1332
  • Uses Array for nodes and elements in the DOM-tree to leverage the JiT compiler better - By @​capricorn86 in task #​1332
  • Adds support for HTMLInputElement.list - By @​capricorn86 in task #​1332
  • Improves support for ShadowRoot (it now supports clonable, serializable and slotAssignment) - By @​capricorn86 in task #​1332
  • Adds support for Element.getHTML() - By @​capricorn86 in task #​1332
  • Improves performance for some pseudo query selectors - By @​capricorn86 in task #​1332
  • Improves support for HTMLSlotElement - By @​capricorn86 in task #​1332
    • It now supports assign(), assignedNodes(), assignedElements() and the slotchange event
👷‍♂️ Patch fixes
  • Attributes and text data wasn't escaped correctly in XMLSerializer (used by features such as innerHTML) - By @​capricorn86 in task #​1265
  • waitForNavigation() would not resolve when navigating to some URLs (e.g. "javascript" or "about:blank") - By @​capricorn86 in task #​1332
  • CSS rules for gradients where not parsed correctly - By @​capricorn86 in task #​1332
  • Updates to CSSStyleDeclaration would not trigger listeners for the "style" attribute - By @​capricorn86 in task #​1332
  • Attributes where added to elements after they were added to the DOM during parsing, causing problems for elements loading resources - By @​capricorn86 in task #​1332
  • Attr.cloneNode() would not clone internal values - By @​capricorn86 in task #​1332
  • Document.title included text data inside child elements, which it shouldn't - By @​capricorn86 in task #​1332
  • Event.preventDefault() shouldn't cancel the default behaviour if cancelable is not sent as an option in EventTarget.dispatchEvent() - By @​capricorn86 in task #​1332
  • Source attributes containing URLs would not be resolved correctly in some elements - By @​capricorn86 in task #​1332
  • Changes name on TimeRange to TimeRanges - By @​capricorn86 in task #​1332
  • Window.parent and Window.top would not be set correctly in some scenarios - By @​capricorn86 in task #​1332

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 6, 2024 20:02
@SteKoe SteKoe closed this Nov 15, 2024
Copy link
Contributor Author

renovate bot commented Nov 15, 2024

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 15.x releases. But if you manually upgrade to 15.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/npm-happy-dom-vulnerability branch November 15, 2024 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant